Security Awareness Training Blog

Cybercrime Blog

We report on the latest trends in cybercrime to help you stay informed and aware of what the current threat landscape looks like.

Russian Secret Weapon Against U.S. 2020 Election Revealed In New Cyberwarfare Report

You may have sensed this, but you need to confront the fact the Planet Earth is an anarchy of nations. The UN is ineffective and thoroughly corrupt. A few good things have come out of it, ...
Continue Reading

Financial Phishing Campaigns on the Rise

More than 1900 new potential bank phishing sites were registered in the first half of 2019, according to researchers at NormShield. Based on the increase in new suspicious domains ...
Continue Reading

New Cyber Attack Trends Report Reveals That Digital Criminals Made Off With $45 Billion in 2018

Scott Ikeda at CPO Magazine posted insights about a new report on cyber attack trends which combines information from a number of high-level sources. It reveals a startling amount of ...
Continue Reading

UK Mid-Sized Firms Lost £30bn to CyberAttacks in 2018

Phil Muncaster at InfoSec Mag reported that "Cybersecurity incidents have cost UK mid-market firms a combined £30bn over the past year as automated attacks become the norm, according to ...
Continue Reading

“Lack of Security Awareness” a Major Reason Why Financial Firms Are 300 Time More Likely to Fall Prey to Cyberattacks

The bad guys always go where the money is. And financial firms are grossly ill-prepared for cyberattacks and suffer higher costs in addressing successful attacks. Boston Consulting Group ...
Continue Reading

One more reason to keep your money stuffed under your mattress?

By Eric Howes, KnowBe4 Principal Lab Researcher. Every so often someone flags an email with our Phish Alert Button that isn't a phishing email but is still very interesting. In this case, ...
Continue Reading

ATM Card Number Scammer Sentenced to 32 Months in Prison

The story of one text-based scam shows how easy it is for literally anyone to become a cybercriminal. It also shows how the amateurs should leave it to the professionals.
Continue Reading

[Heads-up] The U.S. Launched A Cyber Attack On Iran, And We're Expecting Spear Phishing Strike Backs

The tension in the Middle-East apparently prompted a game-changing move by the U.S. President. Washington Post sources say exactly 10 years after Stuxnet, the President approved a ...
Continue Reading

FBI Alert: Last Week Conflict With Iran Can Cause Spear Phishing Retaliation

This blog post has been superseded by a more recent one. You can find this new post here.
Continue Reading

Why Do Organizations Still Under-report Cybercrime?

It’s estimated that organizations aren’t engaging with Law Enforcement when becoming a victim of a cybercrime in large numbers. We cover 5 reasons why organizations don’t.
Continue Reading

Massive Cyberheist Bankrupts Medical Debt Collector

AMCA, a medical billing collections agency that was hacked last year in an incident believed to impact millions of medical patients is now seeking a federal bankruptcy court’s protection ...
Continue Reading

Europol Reminder on Ticket Fraud

Offers that sound too good to be true probably are. It’s an old saw, but one that’s worth revisiting. The too-good-to-be-true offers are most likely fraudulent, according to an alert ...
Continue Reading

'BlueKeep' Microsoft Windows Flaw Warning from NSA, Video for How To Patch

Microsoft recently released a fix for for a critical Remote Code Execution vulnerability, CVE-2019-0708, in Remote Desktop Services - that affects older versions of Microsoft Windows. ...
Continue Reading

Global GozNym Takedown Shows The Anatomy Of A Modern Cybercrime Supply Chain

By Javvad Malik, our new Security Awareness Advocate for EMEA. A multi-national collaborative law enforcement effort has arrested individuals allegedly behind Nymaim and Gozi, also known ...
Continue Reading

Executives are Out and Employees are In as Cybercriminals Change Their Primary Targets for Cyberattack

Phishing and Social Engineering scammers are shifting tactics, focusing efforts on low-level employees using a variety of methods as a means to cast a wider net within a targeted ...
Continue Reading

A Mystery Agent Is Doxing Iran's Hackers And Dumping Their Code

Alyssa Foote at WIRED wrote: "NEARLY THREE YEARS after the mysterious group called the Shadow Brokers began disemboweling the NSA's hackers and leaking their hacking tools onto the open ...
Continue Reading

Phishing Attack Spoofs Email Security Firm

Ray Shultz at MediaPost's EmailINSIDER wrote about a nasty new way that the bad guys are trying to establish trust: spoofing the return path and received email headers of Barracuda in an ...
Continue Reading

Organizations Face a 63% Likelihood of Being the Victim of Successful Cyberattack in Next 12 Months

The latest data from 1,200 IT organizations shows organizations seeing attacks as inevitable and, for some industries, successful compromise as even more a given.
Continue Reading

Tallahassee Loses Half a Million From Cyberattack

Hackers stole approximately $498,000 from the city of Tallahassee, Florida, by diverting city employees’ paychecks, according to USA Today. The attackers hacked a third-party vendor that ...
Continue Reading

Cybercrime market selling full digital fingerprints of over 60,000 users

ZDNet reported something surprising. A new dark web market called Genesis is selling users' personal data, complete with digital fingerprints, such as account credentials, cookies, ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews